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Amendments to the Specification 



Please replace paragraph [0050] with the following amended paragraph. 

[0050] The content publisher generates the sharing polynomial f(x) ov e r a finit e fi e ld Z # 
where a Q = SK. Although polynomial interpolation is described, other collections of 
functions may also be utilized. Each partial secret share Si may then be calculated using 
Equation (3), which is shown as follows: 



where N is a RS A modulus and <f>(N) is a Euler totient function. 



Please replace paragraph [0053] with the following amended paragraph. 

[0053] At block 514, for instance, the content publisher may broadcast k public witnesses 



where g c Z N ge Z* N . After broadcast, the content publisher may destroy the polynomial. 

At block 516, each license authority idi verifies validity of the received partial secret 
share. Validity may be checked by determining if Equation (4), as shown below, holds 
for the received partial secret share 5, utilizing the sharing polynomial's coefficients 
which were broadcast at block 514: 



Si =f(id0 mod N<f>{N) 



(3) 



of the sharing polynomial's coefficients, which are 



denoted asfefV"^}, 



mod N 



(4) 
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In this way, each license authority id h may verify the validity of the received partial 
secret share 5, without exposing or knowing the secret, i.e. the private key SK. 

Please replace paragraph [0063] with the following amended paragraph. 

[0063] At block 620, the content player, when executed by the client device, determines if 
k correct partial licenses have been received by validating each of the partial licenses. 
The partial licenses may be validated as follows. First, node p calculates 

(7) 

from the public witnesses of the sharing polynomial's coefficients, as was described in 
relation to block 516 of FIG. 5 and Equation (4). Equation (6) is then applied to g Si and 
the received partial license prel h Aj 9 and A 2 to calculate c. The received partial license 
preU is verified by checking if the following equations hold: g r -(g Si ) c = A x 
and preV -(pre^Y = A 2 . The above steps are repeated until the node p obtains k valid 
partial licenses. If k valid partial licenses cannot be obtained, generation of the formal- 
license fails (block 622). 

Please replace paragraph [0064] with the following amended paragraph. 

[0064] If k valid partial licenses are obtained, then at block 624, the content player 
combines the partial licenses to form the formal license. For example, the node p uses 
the k valid partial results to calculate the formal license utilizing Equation (8): 



lee a haves, pllc 



3 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



license=Y[(p^l i f dii0) =(prel) 9 



(8) 



i 



= ( p ret) SK = ((licenser mod N . 



where l idi (x)= 



j-wnidt-idj 




Please replace paragraph [0075] with the following amended paragraph. 

[0075] At periodic intervals, for example, the license authorities may update their 
respective shares of the private key SK through execution of the respective update 
module 222 of FIG. 2. At block 802, each license authority i generates a random (k t m) 
sharing of the secret 0 using a random update polynomial f ir up date(x), as shown in 
Equation (9): 



fi,update( X ) ~ bi,\ X + — +bi t k-\ X 



modN 



(9) 
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